Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00770434-e2a8-3108-b06d-798bd204207c.roa
File:                     00770434-e2a8-3108-b06d-798bd204207c.roa (raw, json)
Hash identifier:          lrWmUWzqUtw6tScFbADpWhKebzZ6G6R6Zj3Pslzmr8c=
Subject key identifier:   A5:58:09:CB:91:64:54:1F:DE:0A:3D:0B:99:0E:A5:57:E2:17:A5:5E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309F24D2FBB2DF0464AC0D540
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00770434-e2a8-3108-b06d-798bd204207c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f2:4d:2f:bb:2d:f0:46:4a:c0:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=13f8c742-6884-4eac-9830-c6f2fc369349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:29:1a:f7:0d:91:9e:a6:ff:73:f8:fb:01:
                    66:c5:b9:e0:f8:1a:44:7d:02:ae:41:34:6d:fa:73:
                    3b:31:a3:0e:44:5f:f3:e0:de:75:6b:84:86:56:6f:
                    f4:ed:4d:1e:0b:ff:4f:36:f0:29:ac:b6:60:3a:5c:
                    d2:4b:e7:34:d4:ce:f4:56:4b:6f:49:d1:27:81:9e:
                    b6:b1:bb:2b:60:95:4f:76:66:d5:b4:94:a5:62:ba:
                    cf:68:9b:72:f1:2c:15:66:e3:c3:0b:30:ea:f0:54:
                    a0:75:1a:9d:b6:b0:be:0b:54:bb:a5:f7:f2:41:12:
                    f5:72:af:6c:87:28:57:5f:04:94:a7:97:97:1c:88:
                    a7:f0:76:07:43:81:6f:32:e3:cb:c3:f4:f6:7a:22:
                    57:64:fd:9b:bb:0d:41:fb:5f:3c:c0:2a:9e:08:f4:
                    c1:0a:57:08:3f:46:e5:6b:ec:f3:35:bf:4c:82:b9:
                    77:13:eb:22:c6:56:5f:64:89:de:93:10:91:75:8e:
                    29:46:e8:92:f7:c1:86:9c:97:23:73:6d:8d:c0:6d:
                    2e:4b:30:7d:92:54:c9:e1:bf:97:3a:02:87:ad:62:
                    aa:ae:d3:94:76:cf:ac:4e:8d:62:a1:c1:4c:8b:24:
                    a0:7e:15:0e:87:fa:b3:e9:bb:bc:25:06:07:7c:8b:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:58:09:CB:91:64:54:1F:DE:0A:3D:0B:99:0E:A5:57:E2:17:A5:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00770434-e2a8-3108-b06d-798bd204207c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d1:40:d2:8e:05:87:62:e2:ae:04:c2:f2:9f:35:85:3c:b0:
         ed:df:d3:3b:55:06:b5:f1:33:13:0a:53:e5:60:ef:db:fb:14:
         ac:71:8a:01:be:fd:85:44:df:a8:41:01:30:50:bd:0a:05:4d:
         5f:87:35:13:9f:96:ad:f1:b2:df:e2:65:57:85:05:ae:f4:ac:
         a9:5c:4e:35:63:43:4c:19:aa:3d:68:85:c2:e4:87:9a:79:cb:
         90:6c:d5:7b:4c:17:1c:b5:6b:93:1a:a9:3e:c9:78:d8:6a:a5:
         a2:bc:0b:29:b2:09:84:fb:17:d7:ba:c1:e9:10:cc:aa:29:2f:
         d6:51:a6:4a:dd:b1:27:d9:59:aa:44:84:6a:4e:22:7b:89:30:
         99:23:a8:04:5a:96:75:d1:ba:2a:f3:71:a8:fd:7c:e4:5d:a0:
         da:ce:bc:84:35:0f:af:9d:27:03:5e:f3:5f:18:17:c2:0e:4d:
         b0:a4:8c:ac:ea:89:60:5b:63:99:0b:49:f2:f6:31:c3:b0:42:
         a2:4a:84:63:66:20:9e:37:13:3a:f7:f3:32:58:64:87:7c:34:
         de:00:11:b1:bc:90:23:16:2b:dc:1f:9b:2d:93:6e:a0:c5:82:
         32:b8:cc:97:06:e0:57:a9:6b:dd:ee:69:15:35:75:27:f2:aa:
         89:8e:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:54 2024 by rpki-client on console-fra.rpki-client.org